İçeriğe atla
Noroxi

jfrog kayıtları

jfrog üreticisine ait 73 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
4 · %5,5
Silahlaştırılmış
4 · %5,5
Pre-auth RCE
2
Düzeltme kaydı olan
%8,2
Yayından KEV’e ortanca
23 gün

Yıllara göre kayıt

  1. 16
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

73 kayıt
  • CVE-2026-82329
    73Bu hafta

    Potential authentication bypass leading to administrative access in Artifactory

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %14

    jfrog · artifactory28 Ağu 2026

  • CVE-2026-42016
    68Bu hafta

    Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %9

    jfrog · artifactory27 Tem 2026

  • CVE-2026-42018
    63Bu hafta

    Anonymous user token generation exposure in JFrog Artifactory

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %10

    jfrog · artifactory12 Ağu 2026

  • CVE-2019-17444
    60Bu hafta

    JFrog Artifactory does not enforce default admin password change

    KritikCVSS 9,8Kavram kanıtıEPSS %69

    jfrog · artifactory12 Eki 2020

  • CVE-2019-9733
    55Planlayın

    An issue was discovered in JFrog Artifactory 6.7.3.

    KritikCVSS 9,8Kavram kanıtıEPSS %53

    jfrog · artifactory11 Nis 2019

  • CVE-2026-66384
    51Planlayın

    Authenticated users may write data outside the intended Docker cache path

    OrtaCVSS 5,3KEVSilahlaştırılmışEPSS %1

    jfrog · artifactory12 Ağu 2026

  • CVE-2016-10036
    47Planlayın

    Unrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before 4.16 allows remote attackers to (1) deploy an arbit

    KritikCVSS 9,8Kavram kanıtıEPSS %26

    jfrog · artifactory1 May 2018

  • CVE-2016-6501
    40Planlayın

    JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object,

    KritikCVSS 9,8İstismar yokEPSS %4

    jfrog · artifactory9 Ara 2016

  • CVE-2018-19971
    40Planlayın

    JFrog Artifactory Pro 6.5.9 has Incorrect Access Control.

    KritikCVSS 9,8İstismar yokEPSS %3

    jfrog · artifactory16 Nis 2019

  • CVE-2022-0668
    39İzleyin

    JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted r

    KritikCVSS 9,8İstismar yokEPSS %1

    jfrog · artifactory8 Oca 2023

  • CVE-2020-7931
    37İzleyin

    In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modifying a .ssh/authoriz

    YüksekCVSS 8,8Kavram kanıtıEPSS %5

    jfrog · artifactory23 Oca 2020

  • CVE-2024-6915
    37İzleyin

    JFrog Artifactory Cache Poisoning

    KritikCVSS 9,3İstismar yokEPSS %1

    jfrog · artifactory5 Ağu 2024

  • CVE-2022-0573
    36İzleyin

    JFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable to Insecure Deserialization of untrusted data which can lead to DoS, Privilege Es

    YüksekCVSS 8,8İstismar yokEPSS %2

    jfrog · artifactory16 May 2022

  • CVE-2024-4142
    36İzleyin

    JFrog Artifactory Improper input validation within token creation flow

    KritikCVSS 9,0İstismar yokEPSS %1

    jfrog · artifactory1 May 2024

  • CVE-2021-3860
    35İzleyin

    JFrog Artifactory before 7.25.4 (Enterprise+ deployments only), is vulnerable to Blind SQL Injection by a low privileged authenticated user

    YüksekCVSS 8,8İstismar yokEPSS %1

    jfrog · artifactory20 Ara 2021

  • CVE-2023-42661
    35İzleyin

    JFrog Artifactory Improper input validation leads to arbitrary file write

    YüksekCVSS 8,8İstismar yokEPSS %1

    jfrog · artifactory7 Mar 2024

  • CVE-2018-1000206
    35İzleyin

    JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that can result in Class

    YüksekCVSS 8,8İstismar yokEPSS %1

    jfrog · artifactory13 Tem 2018

  • CVE-2026-65617
    35İzleyin

    Potential remote code execution on an Artifactory package service container.

    YüksekCVSS 8,8İstismar yokEPSS %1

    jfrog · artifactory27 Tem 2026

  • CVE-2026-66014
    35İzleyin

    Potential authentication bypass leading to privilege escalation in Artifactory

    YüksekCVSS 8,8İstismar yokEPSS %1

    jfrog · artifactory27 Tem 2026

  • CVE-2026-65921
    35İzleyin

    Potential path traversal leading to unauthorized file writes

    YüksekCVSS 8,8İstismar yokEPSS %1

    jfrog · artifactory27 Tem 2026

  • CVE-2026-42017
    35İzleyin

    Privilege escalation via JFrog Worker event token exposure

    YüksekCVSS 8,8İstismar yokEPSS %1

    jfrog · artifactory27 Tem 2026

  • CVE-2026-69106
    35İzleyin

    Potential cache poisoning in JFrog Artifactory

    YüksekCVSS 8,8İstismar yokEPSS %1

    jfrog · artifactory12 Ağu 2026

  • CVE-2026-65616
    35İzleyin

    Potential privilege escalation to JFrog administrator privileges

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    jfrog · artifactory27 Tem 2026

  • CVE-2021-23163
    35İzleyin

    JFrog Artifactory prior to version 7.33.6 and 6.23.38, is vulnerable to CSRF ( Cross-Site Request Forgery) for specific endpoints.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfrog · artifactory6 Tem 2022

  • CVE-2026-66375
    32İzleyin

    Low-privilege users may remove protected Artifactory metadata

    YüksekCVSS 8,1İstismar yokEPSS %0

    jfrog · artifactory12 Ağu 2026